https://bz.apache.org/bugzilla/show_bug.cgi?id=60256
--- Comment #2 from Tim Allison <talli...@mitre.org> --- The ole10Native object looks like a list of urls and keys...Corrupt data? Should we add a length check in Ole10Native and call it a day? if (dataSize > data.length-ofs) { throw new Ole10NativeException("calculated data size > input byte array-offset"); } dataBuffer = new byte[dataSize]; -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org For additional commands, e-mail: dev-h...@poi.apache.org